Can the core encryption scheme be used to encrypt/decrypt custom module data? I am building a module that will contain sensitve account information and I would like to encrypt in the database table.

1. Can the core encryption scheme be used?
2. What is used as a key? Can I specify a custom key, like CustomerId?
3. Should by database data type be binary, varchar, ntext...etc?

Thanks for any information provided,this is my first module that contains sensitive info.

In the IWeb module, there is a encryption/dycryption method (you can download it and use the code)

Public Function Encryption(ByVal UnEncryptedData As String, ByVal Key As String) As String

Public Function DeCrypt(ByVal EncryptedData As String, ByVal Key As String) As String

You just toss it a string and a key. It uses Rijndael encryption which is true .Net "managed code". The other .Net encryption methods are "wrappers" around COM components. 

Michael -

I had some mixed results with using the IWeb encryption methods. The encrypt part works well, but the decryption always throws an error:

DotNetNuke.Services.Exceptions.ModuleLoadException: Length of the data to decrypt is invalid. ---> System.Security.Cryptography.CryptographicException: Length of the data to decrypt is invalid. at System.Security.Cryptography.RijndaelManagedTransform.TransformFinalBlock(Byte[] inputBuffer, Int32 inputOffset, Int32 inputCount) at System.Security.Cryptography.CryptoStream.FlushFinalBlock() at System.Security.Cryptography.CryptoStream.Dispose(Boolean disposing) at System.IO.Stream.Close() at MNO.Modules.SOMS.Symmetric.Decrypt(cryptData encryptedcryptData)

This is how I'm calling it in the Controller Class:

<DataObjectMethod(DataObjectMethodType.Select)> _
Public Function GetCustomer(ByVal customerId As Integer) As CustomerInfo
   Dim customerInfo As New CustomerInfo
   Dim Encrypter As New IWebEncryption()
   customerInfo = CType(CBO.FillObject(DataProvider.Instance().GetCustomer(customerId), GetType(CustomerInfo)), CustomerInfo)
   customerInfo.AccountNo = Encrypter.DeCrypt(customerInfo.AccountNo, _key)
   customerInfo.CID = Encrypter.DeCrypt(customerInfo.CID, _key)
   customerInfo.ExpDate = Encrypter.DeCrypt(customerInfo.ExpDate, _key)
Return customerInfo
End Function